445 matches found
Design/Logic Flaw
The Electronic Funds Source EFS Mobile Driver Source app 2.5 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2017-5909
The Electronic Funds Source EFS Mobile Driver Source app 2.5 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2017-5909
The Electronic Funds Source EFS Mobile Driver Source app 2.5 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2017-5909
The Electronic Funds Source EFS Mobile Driver Source app 2.5 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2017-5909
The CVE-2017-5909 entry concerns the Electronic Funds Source Mobile Driver Source app for iOS, version 2.5. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling a man-in-the-middle to spoof servers and obtain sensitive information via a crafted certifica...
CVE-2017-5909: Improper Certificate Validation
The Electronic Funds Source EFS Mobile Driver Source app 2.5 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
PT-2017-16750
Name of the Vulnerable Software and Affected Versions Electronic Funds Source EFS Mobile Driver Source app version 2.5 for iOS Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the app does not verify X.509...
April 11, 2017—KB4015221 (OS Build 10240.17354)
None None...
Google Patches Android 'Custom Boot Mode' Vulnerability
A high-risk Android custom boot mode vulnerability was one of many bugs patched by Google as part of its January Android Security Bulletin released earlier this week. On Thursday, the IBM security team that discovered the vulnerability disclosed details about the flaw which leaves Nexus 6 and 6P...
Microsoft IExpress DLL Hijacking
Hi @ll, IExpress creates executable installers ° or self-extracting archives for Windows by embedding a .CAB archive and some strings as resources into a copy of the program %SystemRoot%\System32\WExtract.exe. These self-extracting archives/executable installers, especially those made by Microsof...
IT-Grundschutz M4.147: Sichere Nutzung von EFS unter Windows
IT-Grundschutz M4.147: Sichere Nutzung von EFS unter Windows. Stand: 15. Ergänzungslieferung 15. EL. OpenVAS Vulnerability Test $Id: GSHBM4147.nasl 7883 2017-11-23 11:22:59Z emoss $ IT-Grundschutz, 15. EL, Maßnahme 4.147 Authors: Thomas Rotter Copyright: Copyright c 2015 Greenbone Networks GmbH,...
IT-Grundschutz M4.147: Sichere Nutzung von EFS unter Windows
IT-Grundschutz M4.147: Sichere Nutzung von EFS unter Windows. Stand: 15. Ergnzungslieferung 15. EL. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
CVE-2014-5178
Multiple cross-site scripting XSS vulnerabilities in Easy File Sharing EFS Web Server 6.8 allow remote authenticated users to inject arbitrary web script or HTML via the content parameter when 1 creating a topic or 2 posting an answer. NOTE: some of these details are obtained from third party...
CVE-2014-5178
Multiple cross-site scripting XSS vulnerabilities in Easy File Sharing EFS Web Server 6.8 allow remote authenticated users to inject arbitrary web script or HTML via the content parameter when 1 creating a topic or 2 posting an answer. NOTE: some of these details are obtained from third party...
CVE-2014-5178
CVE-2014-5178 affects Easy File Sharing (EFS) Web Server 6.8. The vulnerability is cross-site scripting (XSS) triggered by the content parameter during topic creation or when posting an answer, exploitable by remote authenticated users. The provided documents do not specify a patch or a remediati...
PT-2014-6317
Name of the Vulnerable Software and Affected Versions Easy File Sharing EFS Web Server version 6.8 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via the content parameter when creating a topic or posting an answer, potentially leading to cross-site...
CVE-2014-5178: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Easy File Sharing EFS Web Server 6.8 allow remote authenticated users to inject arbitrary web script or HTML via the content parameter when 1 creating a topic or 2 posting an answer. NOTE: some of these details are obtained from third party...
Easy File Sharing Persistent Cross Site Scripting
I saw a posting a month or 2 ago for a BOF in an FTP server belonging to EFS Software here: http://www.securityfocus.com/bid/19243 At first there was no additional details provided and I hunted up and down before finding it after some fuzzing stack smash in password. While on the hunt, I found on...
Easy File Sharing Web Server 6.8 - Stack Buffer Overflow
No description provided by source. Exploit Title: Easy File Sharing Web Server 6.8 stack buffer overflow Date: 10 May 2014 Exploit Author: superkojiman - http://www.techorganic.com Vendor Homepage: http://www.efssoft.com Software Link: http://www.sharing-file.com/efssetup.exe Version: 6.8 Tested...
EFS Easy Address Book Web Server <= 1.2 - Remote File Stream Exploit
No description provided by source. / ========================================================================== 0-day Alternative File Stream Exploit for EFS Easy Address Book Web Server =========================================================================== EFS' Easy Address Book Web Server ...